wix-vibe-headless
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external Wix APIs, such as product details, blog posts, and CMS collections. This creates a surface where malicious instructions could be embedded in the data by an entity with write access to the Wix dashboard. The skill follows best practices by instructing the agent to render live data and use official empty states, but does not specify custom sanitization for rich text content.
- [COMMAND_EXECUTION]: The installation and build instructions for specific platforms (like Base44) involve executing shell commands via the agent's execution tools. These commands are used to install related Wix skills and run local deployment scripts (
deploy.cjs) to scaffold the project. This behavior is restricted to the build environment and is used for its intended purpose of site provisioning. - [DYNAMIC_EXECUTION]: The skill uses dynamic module loading (
require) to execute local seeding scripts (seed-*.cjs) during the setup phase. These scripts perform administrative operations against the Wix API to populate the site with initial content. This is a functional requirement for the skill's seeding capability and involves vendor-authored code executed at build time.
Audit Metadata